burp
metasploit
zaproxy
nmap